CompTIA SY0-401 Online Practice Questions and Exam Preparation

CompTIA SY0-401 Online Questions & Answers

• Question 1301:

  Which of the following works by implanting software on systems but delays execution until a specific set of conditions is met?

  A. Logic bomb
  B. Trojan
  C. Scareware
  D. Ransomware
  A. Logic bomb

• Question 1302:

  Which of the following attack types is being carried out where a target is being sent unsolicited messages via Bluetooth?

  A. War chalking
  B. Bluejacking
  C. Bluesnarfing
  D. Rogue tethering
  B. Bluejacking

  ---

  Bluejacking is the sending of unsolicited messages over Bluetooth to Bluetooth-enabled devices such as mobile phones, PDAs or laptop computers, sending a vCard which typically contains a message in the name field (i.e., for bluedating or bluechat) to another Bluetooth-enabled device via the OBEX protocol.

• Question 1303:

  A company often processes sensitive data for the government. The company also processes a large amount of commercial work and as such is often providing tours to potential customers that take them into various workspaces. Which of the following security methods can provide protection against tour participants viewing sensitive information at minimal cost?

  A. Strong passwords
  B. Screen protectors
  C. Clean-desk policy
  D. Mantraps
  C. Clean-desk policy

• Question 1304:

  Mobile tablets are used by employees on the sales floor to access customer data. Ann a customer recently reported that another customer was able to access her personal information on the tablet after the employee left the area. Which of the following would BEST prevent these issues from reoccurring?

  A. Screen Locks
  B. Full-device encryption
  C. Application control
  D. Asset tracking
  A. Screen Locks

• Question 1305:

  Which of the following are examples of network segmentation? (Select TWO).

  A. IDS
  B. IaaS
  C. DMZ
  D. Subnet
  E. IPS
  C. DMZ
  D. Subnet

  ---

  C: A demilitarized zone (DMZ) is a part of the network that is separated of segmented from the rest of the network by means of firewalls and acts as a buffer between the untrusted public Internet and the trusted local area network (LAN). D. IP subnets can be used to separate or segment networks while allowing communication between the network segments via routers.

• Question 1306:

  Joe a network administrator is setting up a virtualization host that has additional storage requirements. Which of the following protocols should be used to connect the device to the company SAN? (Select Two)

  A. Fibre channel
  B. SCP
  C. iSCSI
  D. FDDI
  E. SSL
  A. Fibre channel
  C. iSCSI

• Question 1307:

  Which of the following security strategies allows a company to limit damage to internal systems and provides loss control?

  A. Restoration and recovery strategies
  B. Deterrent strategies
  C. Containment strategies
  D. Detection strategies
  C. Containment strategies

  ---

  Containment strategies is used to limit damages, contain a loss so that it may be controlled, much like quarantine, and loss incident isolation.

• Question 1308:

  The security administrator has noticed cars parking just outside of the building fence line. Which of the following security measures can the administrator use to help protect the company's WiFi network against war driving? (Select TWO)

  A. Create a honeynet
  B. Reduce beacon rate
  C. Add false SSIDs
  D. Change antenna placement
  E. Adjust power level controls
  F. Implement a warning banner
  A. Create a honeynet
  E. Adjust power level controls

• Question 1309:

  The common method of breaking larger network address space into smaller networks is known as:

  A. subnetting.
  B. phishing.
  C. virtualization.
  D. packet filtering.
  A. subnetting.

  ---

  Subnetting is a dividing process used on networks to divide larger groups of hosts into smaller collections.

• Question 1310:

  It is MOST important to make sure that the firewall is configured to do which of the following?

  A. Alert management of a possible intrusion.
  B. Deny all traffic and only permit by exception.
  C. Deny all traffic based on known signatures.
  D. Alert the administrator of a possible intrusion.
  B. Deny all traffic and only permit by exception.

  ---

  Firewalls manage traffic using filters, which is just a rule or set of rules. A recommended guideline for firewall rules is, "deny by default; allow by exception".